为提升您的使用体验，本站正在维护，部分功能暂时无法使用。如果本站文章无法解决您的问题，您想要向社区提问的话，请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问，我们的支持社区将会很快回复您的疑问。

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

Learn More

话题已存档。 如果需要帮助请提出新问题。

Import Custom Root CA

  • 1 个回答
  • 0 人有此问题
  • 1 次查看
  • 最后回复者为 cor-el

Sydney
Sydney
more options

Import Custom Root CA

Hello,

I generated a custom CA and used it to sign a server cert. I imported it in the system trusted-ca (ArchLinux). Chromium, Falkon and cURL all accept the custom cert but Firefox does not.

The Root CA is listed in the Certificate/CA list of Firefox (as System Trust) and IS trusted to authenticate web servers.

Nonetheless, Firefox keeps displaying the SSL_ERROR_BAD_CERT_DOMAIN error claiming that jellyfin.media.0 is not part of the trusted names which are jellyfin.media.0, ....

I'm using Firefox 75.0 (distributed by manjaro).

I believe that this problem is Firefox related since the cert works with other browser and curl. Thank you for your help!

Import Custom Root CA Hello, I generated a custom CA and used it to sign a server cert. I imported it in the system trusted-ca (ArchLinux). Chromium, Falkon and cURL all accept the custom cert but Firefox does not. The Root CA is listed in the Certificate/CA list of Firefox (as System Trust) and IS trusted to authenticate web servers. Nonetheless, Firefox keeps displaying the SSL_ERROR_BAD_CERT_DOMAIN error claiming that jellyfin.media.0 is not part of the trusted names which are jellyfin.media.0, .... I'm using Firefox 75.0 (distributed by manjaro). I believe that this problem is Firefox related since the cert works with other browser and curl. Thank you for your help!

所有回复 (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Firefox uses its own certificate store and not the OS certificate store, so you need to import this root certificate in the Firefox Certificate Manager and set the appropriate trust bit(s) when prompted.

  • Options/Preferences -> Privacy & Security
    Certificates: View Certificates -> Authorities -> Import